An interesting article on where malware is headed. You just buy malware bot client like how you would buy online backup services and then use the service to spam sites with your product. Software development kits for botnet management too are available, much like an Android SDK for developing Android apps.